Forms Base Authentication Tools and Utils for SharePoint 2007

Created Issue: cannot manage fba users from Windows-secured site

vargasfe — Wed, 09 Jul 2008 22:56:56 GMT

In my scenario I have an internal application that is windows secured (intranet). This application is extended for external access by fba users (Extranet).
when I am loged on to the intranet with windows credentials I am able to manage user permisions for fba users but when I use this feature to create and manage fba users it returns the following error:
-- Error message
The configured Role Provider (WindowsTokenRoleProvider) relies upon Windows authentication to determine the groups that the user is allowed to be a member of. ASP.NET Role Manager cannot be used to manage Windows users and groups. Please use the SQLRoleProvider if you would like to support custom user/role assignment.
--

New Post: Desynch of the email addresses

ibar78 — Wed, 09 Jul 2008 09:23:11 GMT

Thanks Patrick for the quick response, like you I've had to resort to deleting the account which is a bit tedious but we can live with it.

Rabi

pgibeau wrote:

Hello Ibar,

Sorry, but no, no proposed fixes. The only solution we had thus far was to delete the user and recreate it. It was acceptable for us since it was not a major issue. But I guess you could modify the FBAUserEdit form so that when it summits, it fetches the Sharepoint user associated to the FBA user and manually updates it (you can probably do it through the object model even though you can't do it through the GUI).

Cheers,
Patrick

ibar78 wrote:
Hi pgibeau, i recently encountered this problem also. Have you managed to find a solution to this problem yet?

pgibeau wrote:
Has anyone noticed that when you modify the email address of a user in the FBA Management that has already been added to the site collection users, the address shown in "Peoples and Groups" is not updated. Even more, the Forgot Password of the FBA uses the new address but Sharepoint alerts uses the old one.

Any proposed fixes ?

New Post: Desynch of the email addresses

pgibeau — Tue, 08 Jul 2008 19:04:25 GMT

Hello Ibar,

ibar78 wrote:
Hi pgibeau, i recently encountered this problem also. Have you managed to find a solution to this problem yet?

New Post: Desynch of the email addresses

ibar78 — Tue, 08 Jul 2008 12:43:11 GMT

Hi pgibeau, i recently encountered this problem also. Have you managed to find a solution to this problem yet?

Commented Issue: UsersDisp.aspx Error

Bill732 — Thu, 03 Jul 2008 13:46:32 GMT

Just installed this tool, clicked on the FBA User Management link and I got the error below

Object reference not set to an instance of an object. at CKS.FormsBasedAuthentication.FBAUsersView.ExecuteSelect(DataSourceSelectArguments selectArgs)
at System.Web.UI.DataSourceView.Select(DataSourceSelectArguments arguments, DataSourceViewSelectCallback callback)
at System.Web.UI.WebControls.DataBoundControl.PerformSelect()
at System.Web.UI.WebControls.BaseDataBoundControl.DataBind()
at System.Web.UI.WebControls.GridView.DataBind()
at System.Web.UI.WebControls.BaseDataBoundControl.EnsureDataBound()
at System.Web.UI.WebControls.CompositeDataBoundControl.CreateChildControls()
at System.Web.UI.Control.EnsureChildControls()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Comments: ** Comment from web user: Bill732 **

pculmsee reported the same problem on this post http://www.codeplex.com/CKS/Thread/View.aspx?ThreadId=16363 and has more information. Replies suggest checking permissions on database. I've tried adding Moss app pool account and the moss set up account. No luck so far.

Created Issue: 403 Forbidden

rajkalagara — Tue, 01 Jul 2008 00:42:49 GMT

I installed the FBAManagement solution. When i click on New user i get "403 forbidden. " Could any one please help me troubleshoot the problem.

Thank you,
Raj.

Commented Issue: UsersDisp.aspx Error

Bill732 — Mon, 30 Jun 2008 17:01:13 GMT

I have run into this as well. I have the the site set up with dual authentication. I set it up pretty much according to Andrew Connell's instructions (http://www.andrewconnell.com/blog/articles/HowToConfigPublishingSiteWithDualAuthProvidersAndAnonAccess.aspx) except that I have the public facing web site (his http://internet) in the "default" zone instead of the "internet" zone. I had to do it this way because the site already existed in the "default" zone. I haven't had any issues with this arrangement, so I don't think that is the problem.

I deployed the solution to the windows authenticating website because that is where we plan to do the user management. I do have the connection strings, membership provider, role provider, etc. in the web.config files of both the windows authenticating app and forms authenticating app. Both seem to be able to find users in the database.

The FBA Membership Request Management page opens fine. Just the FBA User Management page errors as described by rideon88.

Created Issue: RoleNew.cs

NikkamM — Wed, 25 Jun 2008 22:54:15 GMT

I was getting object reference not set to an instance of the object whenever I tried to create a role. Figured the declaration has to be changed to "protected".

protected InputFormTextBox txtRole;
protected Label lblMessage;

Created Issue: UsersDisp.aspx Error

rideon88 — Mon, 23 Jun 2008 17:58:06 GMT

NEW POST: MOSS 2007 site with both Anonymous and Froms authentication

krishna26 — Thu, 08 May 2008 07:51:32 GMT

Hi,
Its simple. Follow the setps to to configure the site with FBA. Along with this,

1. check the "Allow Annonymous Access" in while configuring the Authentication Providers for your site collection just after checking the "Forms" in the authentication section.

2. Go to your site collection's Settings --> Advanced Settings (below people and groups).
3. Check "Entire Site" for top level site collection.
4. Repeat the step 2 for all other child sites and set "Nothing".

Cheers,
Krishna.

NEW POST: Desynch of the email addresses

pgibeau — Thu, 01 May 2008 14:24:08 GMT

Has anyone noticed that when you modify the email address of a user in the FBA Management that has already been added to the site collection users, the address shown in "Peoples and Groups" is not updated. Even more, the Forgot Password of the FBA uses the new address but Sharepoint alerts uses the old one.

Any proposed fixes ?

NEW POST: MOSS 2007 site with both Anonymous and Froms authentication

sharepointuser — Tue, 29 Apr 2008 18:23:42 GMT

Krishna,

can you pls tell me steps for enabling FBA authentictaion on subsite under root site? So far only way I know is extend webapplication in different zone and configure FBA on it.

Please reply ASAP.

Thanks,

NEW POST: Alerts cannot be sent to users in roles

stacyDraper — Sat, 19 Apr 2008 06:10:31 GMT

I've noticed this too and odn't have a great solution.

COMMENTED ISSUE: Reset password: mssing file UsersAndRoles.aspx

stacyDraper — Sat, 19 Apr 2008 05:59:10 GMT

When trying to reset the password for a user, an error is thrown. The exception message in the SharePoint log files is: The file '/_layouts/FBA/Management/UsersAndRoles.aspx' does not exist.
And indeed, looking into that directory, no such file is present (there are other files present though, such as: UserDelete.aspx, UserEdit.aspx, UserNew.aspx and UsersDisp.aspx and Roles....aspx).
Apparently there is some file not installed during the installation process. There were no errors though during the install process. How can I get the missing UsersAndRoles.aspx file?
Comments: ** Comment from web user: stacyDraper **

There is no way to change it in the gui. it's not too hard to add though. I'm just trying to provide base functionality. Feel free to modify your soource however you choose :)

CLOSED ISSUE: Reset Password Does Nothing

stacyDraper — Sat, 19 Apr 2008 05:56:18 GMT

When I go to Site Setings->Manage FBA User->click on an already-existing user->Click "Reset Password" button, its just takes me back to the list of users instead of a password-reset page.
Comments: This is by design even though it's probably (most definatly) a bad design. The object model has a reset method fo the password so I used it. What it does is send an email to the user some random impossible to manage password.

I pretty much left that up for anyone else to impliment however they like because there are so many possiblities that would all be driven by any given policy.

NEW POST: MOSS 2007 site with both Anonymous and Froms authentication

krishna26 — Sat, 22 Mar 2008 12:58:23 GMT

Hi
I have a requirement as follows:
1. There is a MOSS 2007 site, the top level site collection http://www.site.com/default.aspx is enabled with Anonymous access.
2. The rest of sub sites called http://www.site.com/AboutUs, http://www.site.com/Services, http://www.site.com/Products, http://www.site.com/contactus are enabled with Forms Authentication.
3. Since the www.site.com is enabled with anonymous access, everybody can access and see the content of the home page of www.site.com site. If the user clicks on any of those sub sites, it prompts for credentials.
4. In order to access/view the content of sub sites, users must register and login.
5. Everything is working fine with MOSS out of box FBA configuration settings, but I dont want to use the default forms authentication login page & controls.
6. I have created a custom login control (web part) and placed on www.site.com's default.aspx page and coded as below

1. protected void HStarLogin_Authenticate(object sender, AuthenticateEventArgs e)
2. {
3. if (Membership.ValidateUser(HStarLogin.UserName, HStarLogin.Password))
4. {
5. LoginStatus.Text = "Logged in successfully";
6. ----------------
7. }
8. else
9. {
10. LoginStatus.Text = "Logged in failed";
11. }
12. }

The above code works fine and checking whether the user exist in custom user database (aspnetdb created with aspnet_regsql.exe during FBA configuration of my site).
But, how to provide the access in my code to the sub sites to the logged in user (FBA Enabled sub sites) after successful validation?
I have stucked for the code that should be present at line 6 in the above code snippet.
Can anyonly provide me how to achieve it, appreciate your help.

Thanks,
Krishna.

CREATED ISSUE: Security bug

AndersDissing — Sat, 01 Mar 2008 11:39:55 GMT

Hey FBA team
Really nice feature, thanks a lot, this feature have mated my life really easier.
But there is a security bug in the feature, if your go to _layouts/FBA/Management/UserEdit.aspx, without logging in you are in enable to add users. The UserEdit page shout not be anonymou page

CREATED ISSUE: Management Links Disappear

androidboy — Fri, 29 Feb 2008 21:52:56 GMT

It seems like the first time I go to Site Settings after logging in, the "Manage FBA Users" and "Manage FBA Roles" links appear fine in the Site Collection Administration column. But after that, those links disappear.

CREATED ISSUE: Reset Password Does Nothing

androidboy — Fri, 29 Feb 2008 21:51:05 GMT

When I go to Site Setings->Manage FBA User->click on an already-existing user->Click "Reset Password" button, its just takes me back to the list of users instead of a password-reset page.

NEW POST: help with the membership request webpart

blindeza — Tue, 26 Feb 2008 17:39:19 GMT

hello, i need some help.
in the membership request webpart i need to change the "Sign up for your new account" to other text, but i can't find this text.
were i can find this text, someone knows?
thanks